Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,313Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-45582
MediumCVSS 4.1

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in wh

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 tar 1.34-3 on CBL Mariner 2.0, cbl2 tar 1.34-3
CVE-2025-45582
Read the vendor advisory Watch this product
Delinea Security AdvisoriesCVE-2026-15640
CriticalCVSS 9.5

Authentication Bypass via SAML Response Manipulation - CVE-2026-15640

Open the original vendor bulletin for the full description and affected-version details.

Affected productsDelinea Secret Server on-prem 10.5.0 through 12.1.3
Fixed versionsUpgrade to secret server version 12.2.7 or later.
Vendor guidance

Upgrade to secret server version 12.2.7 or later.

CVE-2026-15640
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8758-1
Severity not listed

USN-8758-1: dracut vulnerability

It was discovered that dracut did not properly shell-quote messages written by the die() function to the emergency hook directory. An attacker on the adjacent network controlling a rogue DHCP server could use this issue to inject commands that execute as root during boot-failu...

CVE-2026-15816
Read the vendor advisory
Ubuntu Security NoticesUSN-8739-2
Severity not listed

USN-8739-2: ImageMagick vulnerabilities

USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of ...

Vendor guidance

USN-8739-1 fixed vulnerabilities in ImageMagick.

CVE-2026-56366CVE-2026-56368CVE-2026-56371CVE-2026-56373CVE-2026-56370CVE-2026-56378
Read the vendor advisory
AWS Security BulletinsCVE-2026-86830
Severity not listed

CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Bulletin ID: 2026-112-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/14/2026 10:45 AM PDT Description: Temporary Elevated Access Management (TEAM) is an open source AWS sample solution for managing temporary elevated access via AWS IAM Identit...

CVE-2026-86830
Read the vendor advisory
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources